CVE-2020-6328

SAP 3D Visual Enterprise Viewer 9 is affected by a CGM file parsing vulnerability arising from improper input validation. The issue allows a user to open a manipulated CGM file from untrusted sources, with ZDI describing a remote code execution via untrusted pointer dereference during CGM parsing...

cgm-arena.de Cross Site Scripting vulnerability

Security Researcher raviakp1004 Helped patch 490 vulnerabilities Received 3 Coordinated Disclosure badges Received 4 recommendations , a holder of 3 badges for responsible and coordinated disclosure, found a security vulnerability affecting cgm-arena.de website and its users. Following coordinate...

libreoffice:cgmfuzzer: Heap-buffer-overflow in CGM::ImplDoClass7

Project: git://anongit.freedesktop.org/libreoffice/core Detailed Report: https://oss-fuzz.com/testcase?key=5658636202541056 Project: libreoffice Fuzzing Engine: libFuzzer Fuzz Target: cgmfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 9 Crash...

libreoffice:cgmfuzzer: Heap-use-after-free in CGM::ImplDoClass7

Project: git://anongit.freedesktop.org/libreoffice/core Detailed Report: https://oss-fuzz.com/testcase?key=5681761959018496 Project: libreoffice Fuzzing Engine: libFuzzer Fuzz Target: cgmfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Heap-use-after-free WRITE 9 Crash...

cgm-arena.de XSS vulnerability

Open Bug Bounty ID: OBB-626114 Description| Value ---|--- Affected Website:| cgm-arena.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

libreoffice/cgmfuzzer: Heap-buffer-overflow in CGM::ImplDoClass7

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=5741937450549248 Project: libreoffice Fuzzer: libFuzzerlibreofficecgmfuzzer Fuzz target binary: cgmfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Heap-buffer-overfl...

libreoffice: Heap-buffer-overflow in CGM::ImplDoClass4

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=6107955046907904 Project: libreoffice Fuzzer: libFuzzerlibreofficecgmfuzzer Fuzz target binary: cgmfuzzer Job Type: libfuzzerasanlibreofficeuntrusted Platform Id: linux Crash Type:...

libreoffice: Heap-use-after-free in Bundle::GetIndex

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=5288817537843200 Project: libreoffice Fuzzer: libFuzzerlibreofficecgmfuzzer Fuzz target binary: cgmfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Heap-use-after-fre...

Halliburton LogView Pro 9.7.5 - '.cgm' / '.tif' / '.tiff' / '.tifh' Crash (PoC)

Exploit Title: Haliburton LogView Pro v9.7.5 Exploit Author: Karn Ganeshen Download link: http://www.halliburton.com/public/lp/contents/InteractiveTools/web/Toolkits/lp/HalliburtonLogViewer.exe Version: Current version 9.7.5 Tested on: Windows Vista Ultimate SP2 Open cgm/tif/tiff/tifh file -...

Microsoft Graphics Filters CGM Image Converter Buffer Overrun (MS10-105) - Ver2 (CVE-2010-3945)

Computer Graphics Metafile CGM is a free and open international standard file format for 2D vector graphics, raster graphics, and text. A remote code execution vulnerability has been discovered in the way that Microsoft Office allocates buffer size when handling CGM image files. The vulnerability...

CVE-2012-2524

Microsoft Office 2007 SP2 and SP3 and 2010 SP1 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted Computer Graphics Metafile CGM file, aka "CGM File Format Memory Corruption Vulnerability."...

Memory corruption

Microsoft Office 2007 SP2 and SP3 and 2010 SP1 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted Computer Graphics Metafile CGM file, aka "CGM File Format Memory Corruption Vulnerability."...

CVE-2012-2524

Microsoft Office 2007 SP2 and SP3 and 2010 SP1 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted Computer Graphics Metafile CGM file, aka "CGM File Format Memory Corruption Vulnerability."...

CVE-2012-2524

The CVE-2012-2524 issue affects Microsoft Office 2007 SP2/SP3 and Office 2010 SP1 (32/64-bit) where parsing a crafted CGM file triggers memory corruption, enabling remote code execution or memory denial of service. Root cause: memory corruption during CGM processing in Office components (mso.dll/...

Microsoft Office Remote Code Execution Vulnerability (2731879)

This host is missing an important security update according to Microsoft Bulletin MS12-057. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Office Remote Code Execution Vulnerability (2731879)

This host is missing an important security update according to Microsoft Bulletin MS12-057. OpenVAS Vulnerability Test $Id: secpodms12-057.nasl 5958 2017-04-17 09:02:19Z teissa $ Microsoft Office Remote Code Execution Vulnerability 2731879 Authors: Antu Sanadi Copyright: Copyright c 2012 SecPod,...

Microsoft Office Memory Corruption CVE-2012-2524 Remote Code Execution Vulnerability

Description Microsoft Office is prone to a remote code-execution vulnerability due to a memory-corruption error. Attackers can exploit this issue by enticing an unsuspecting user to open a specially crafted Computer Graphics Metafile CGM graphics file. Successful exploits may allow attackers to...

CVE-2010-3945

Buffer overflow in the CGM image converter in the graphics filters in Microsoft Office XP SP3, Office 2003 SP3, and Office Converter Pack allows remote attackers to execute arbitrary code via a crafted CGM image in an Office document, aka "CGM Image Converter Buffer Overrun Vulnerability."...

Buffer overflow

Buffer overflow in the CGM image converter in the graphics filters in Microsoft Office XP SP3, Office 2003 SP3, and Office Converter Pack allows remote attackers to execute arbitrary code via a crafted CGM image in an Office document, aka "CGM Image Converter Buffer Overrun Vulnerability."...

CVE-2010-3945

CVE-2010-3945 is a buffer overrun in the CGM Image Converter used by Microsoft Office graphics filters (Office XP SP3, Office 2003 SP3, Office Converter Pack). The root cause is improper buffer size allocation when processing CGM images, enabling remote code execution and potential full control o...